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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
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- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)D Responsive to communication(s) filed on . 

2a)D This action is FINAL. 2b)^ This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayte, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-28 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) IEI Claim(s) 1-28 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
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DETAILED ACTION 

1. Claims 1-28 are pending. 

Information Disclosure Statement 

2. The IDS submitted on 3/31/04 has been considered. An initialed copy is 
enclosed. 

Claim Rejections - 35 USC § 101 

3. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or 
composition of matter, or any new and useful improvement thereof, may obtain a patent 
therefor, subject to the conditions and requirements of this title. 

Claims 10-28 are rejected under 35 U.S.C. 101 because the claimed 

invention is directed to non-statutory subject matter. These claims do no restrict 

the claimed invention to statutory classes of invention. Rather, the specification 

defines computer program products embodied on a recording medium to 

encompass transmission media. (See Specification, pg. 6, line 22) Hence, these 

claims are limited to statutory subject matter. 

Claim Rejections - 35 USC § 102 

4. The following is a quotation of the appropriate paragraphs of 35 
U.S.C. 102 that form the basis for the rejections under this section made in this 
Office action: 
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A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in 
public use or on sale in this country, more than one year prior to the date of application for patent in 
the United States. 

5. Claims 1-6, 10-15 and 19-24 and 27 are rejected under 35 U.S.C. 102(b) 
as being anticipated by Botz et al. USPN 6,981,043 (hereinafter Botz). 

6. As per claims 19-24 and 27, Botz discloses a computer program product 
for cross domain security information conversion (figs. 14, 15 and 22), the 
computer program product comprising: 

a. a recording medium; (fig. 6) 

b. means, recorded on the recording medium, for receiving from a 
computer program product entity, in a security service, security 
information in a native format of a first security domain regarding a 
computer program product entity having an identity in at least one security 
domain; (14:17-30) 

c. means, recorded on the recording medium, for translating the 
security information to a canonical format for security information; 

d. means, recorded on the recording medium, for transforming the 
security information in the canonical format using a predefined mapping 
from the first security domain to a second security domain; (9:46-54; fig. 
10) 

e. means, recorded on the recording medium, for translating the 
transformed security information in the canonical format to a native format 
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of the second security domain (10:35-38 and lines 38-52; fig. 21 
"Retrieve User" and "RetrieveUserDefinition"); and 
f. means, recorded on the recording medium, for returning to the 
computer program product entity the security information in the native 
format of the second security domain (14:30-34; fig. 21); 

7. wherein means, recorded on the recording medium, for transforming the 
security information includes means, recorded on the recording medium, for 
structure transformation and value transformation, including means, recorded on 
the recording medium, for mapping a system entity's identity in the first security 
domain to a another identity in the second security domain; (figs. 16-21) 

8. wherein means, recorded on the recording medium, for receiving security 
information further comprises means, recorded on the recording medium, for 
receiving a request for security information for the second security domain, 
wherein the request encapsulates the security information in a native format of a 
first security domain; (14:23-34) 

9. wherein the computer program product entity comprises a computer 
program product entity requesting access to a resource in the second security 
domain; (14:31-32) 

1 0. wherein the computer program product entity comprises a computer 
program product entity providing access to a resource in the second security 
domain; (14:31-32) 

1 1 . wherein means, recorded on the recording medium, for translating the 
security information in a native format of a first security domain to a canonical 
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format comprises a procedural software function; wherein means, recorded on 
the recording medium, for translating the transformed security information in the 
canonical format to a native format of the second security domain comprises a 
procedural software function (figs. 16-21, "APIs") 

12. As per claims 1-6, they are claims corresponding to claims 19-24 and 27, 
and they do not teach or define above the information claimed in claims 19-24 
and 27. Therefore, claims 1-6 are rejected as being anticipated by Botz for the 
same reasons set forth in the rejections of claims 19-24 and 27. 

13. As per claims 10-15, they are claims corresponding to claims 19-24 and 
27, and they do not teach or define above the information claimed in claims 19- 
24 and 27. Therefore, claims 10-15 are rejected as being anticipated by Botz for 
the same reasons set forth in the rejections of claims 19-24 and 27. 

Claim Rejections - 35 USC § 103 

14. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 1 02 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 
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15. Claims 7-9, 16-18, 25, 26 and 28 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Botz in view of Bussler et al. USPN 7,072,898 
(hereinafter Bussler). 

16. As per claims 25, 26 and 28, the rejections of claims 19-24 and 27 as 
being anticipated by Botz are incorporated herein. Botz does not disclose 
expressing the first native format, the canonical format nor the second native 
format in XML, whereby security information is translated between the first native 
format and the second native format via the canonical format via XSL Bussler 
discloses an apparatus for exchanging communications between heterogeneous 
applications wherein data items go through five processes between a source and 
destination: 1) source-side native phase, 2) source-side application phase, 3) 
common view phase, 4) target-side application phase, and 5) target-side native 
phase, whereby the source-side application phase, common view phase and 
target-side application phase utilize XML to express the data from the source- 
side application to the target-side application and vice versa. (3:60-4:43; 5:15- 
7:51) Furthermore, XSL is the standard means of defining transformations of an 
XML file. Finally, Bussler discloses that the invention overcomes deficiencies of 
prior inventions, which centralize integration procedures, by disbursing the 
integration over the several participants of the communication. (2:30-36) 
Therefore, it would be obvious to one of ordinary skill in the art at the time the 
invention was made for the computer program product of Botz to further include 
wherein means, recorded on the recording medium, for translating the security 
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information in a native format of a first security domain to a canonical format 
comprises a mapping, expressed in XSL, from the native format of the first 
security domain to a canonical format; wherein the canonical format is expressed 
in XML and the predefined mapping from the first security domain to a second 
security domain is expressed in XSL; wherein the second native format is 
expressed in XML, the canonical format is expressed in XML, and means, 
recorded on the recording medium, for translating the transformed security 
information in the canonical format to a native format of the second security 
domain comprises a predefined mapping, expressed in XSL, from the canonical 
format to the native format of the second security domain. One would be 
motivated to do so to disburse the integration over the several participants of the 
communication, thereby reducing the complexity of the conversion (Bussler, 
2:30-36) The aforementioned cover the limitations of claims 25, 26 and 28. 

17. As per claims 7-9, the rejections of claims 25, 26 and 28 under 35 USC 
103(a) as being unpatentable over Botz in view of Bussler are incorporated 
herein. In addition, Bussler discloses wherein the native format of the first 
security domain is expressed in XML. (col. 6:3-34) One would be motivated to 
combine the teachings of Bussler with the invention of Botz to disburse the 
integration over the several participants of the communication, thereby reducing 
the complexity of the conversion (Bussler, 2:30-36). The aforementioned cover 
the limitations of claims 7-9. 
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18. As per claims 16-18, they are claims corresponding to claims 25, 26 and 
28, and they do not teach or define above the information claimed in claims 25, 
26 and 28. Therefore, claims 16-18 are rejected as being unpatentable over 
Botz in view of Bussler for the same reasons set forth in the rejections of claims 
25, 26 and 28. 



Conclusion 

1 9. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. See enclosed PTO-892. 

Communications Inquiry 

Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Jung W. Kim whose telephone number is 
571-272-3804. The examiner can normally be reached on M-F 9:00-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Gilberto Barron can be reached on 571-272-3799. The 
fax phone number for the organization where this application or proceeding is 
assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
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direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). ^ 



Jung W Kim 
Examiner 
Art Unit 2132 




